EulerOS 2.0 SP2 : unzip (EulerOS-SA-2019-1348)

According to the version of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - unzip: Buffer overflow in list.c resulting in a denial of serviceCVE-2018-18384 Note that Tenable Network Security has extracted the preceding...

Denial Of Service (DoS)

The unzip utility is used to list, test, or extract files from a zip archive. A buffer overflow was found in the way unzip uncompressed certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash or, possibly, execute arbitrary code when the archive was tested with...

Buffer Overflow

The unzip utility is vulnerable to buffer overflow. It is due to a flaw in the way unzip handled Zip64 files, allowing an attacker to send a malicious Zip archive to cause unzip to crash when the archive was uncompressed...

Buffer Overflow

The unzip utility is vulnerable to buffer overflow. It is due to a integer underflow flaw, leading to a buffer overflow because of the way unzip uncompressed certain extra fields of a file are handled...

Command Injection

Overview All versions of cocos-utils are vulnerable to Remote Code Execution. The unzip function concatenates user input to exec which may allow attackers to execute arbitrary commands on the server. Recommendation No fix is currently available. Consider using an alternative module until a fix is...

openSUSE Security Update : unzip (openSUSE-2019-1117)

This update for unzip fixes the following issues : - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE: Security Advisory for unzip (openSUSE-SU-2019:1117-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1117-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 This update was imported from the SUSE:SLE-15:Update update project...

Security update for unzip (moderate)

openSUSE Security Update: Security update for unzip Announcement ID: openSUSE-SU-2019:1117-1 Rating: moderate References: 1110194 Cross-References: CVE-2018-18384 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for unzip fixe...

openSUSE Security Update : unzip (openSUSE-2019-509)

This update for unzip fixes the following issues : - CVE-2014-9636: Prevent denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression bsc914442 -...

SUSE SLED15 / SLES15 Security Update : unzip (SUSE-SU-2019:0707-1)

This update for unzip fixes the following issues : CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES11 Security Update : unzip (SUSE-SU-2019:13984-1)

This update for unzip fixes the following issues : CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

Canarytokens 2019-03-01 - Detection Bypass Exploit

Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens Google Dork: N/A CVE: 2019-9768...

SUSE-SU-2019:0707-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194...

SUSE-SU-2019:13984-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194...

Canarytokens 2019-03-01 - Detection Bypass

Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Date: 20.03.2019 Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens Google Dork: N/A CVE: 2019-9768...

Canarytokens 2019-03-01 - Detection Bypass

Canarytokens 2019-03-01 - Detection Bypass Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Date: 20.03.2019 Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens...

Canarytokens 2019-03-01 Detection Bypass

Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Date: 20.03.2019 Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens Google Dork: N/A CVE: 2019-9768...

Important Photon OS Security Update - PHSA-2019-0207

Updates of 'unzip', 'gnupg' packages of Photon OS have been released...

Photon OS 2.0: Unzip PHSA-2018-2.0-0052

An update of the unzip package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0052. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121952...